Security Update available for Adobe Reader and Acrobat 8.1.2 - SSO-AL2008-005

25 June 2008

Software and platform/s affected

The following software is affected

Adobe Reader 8.0 through 8.1.2
Adobe Reader 7.0.9 and prior
Adobe Acrobat Professional, 3D and Standard 8.0 through 8.1.2
Adobe Acrobat Professional, 3D and Standard 7.0.9 and prior

for the following operating system platform/s:

All Windows Versions
All Mac OS X versions

What is the problem?

Your personal and/or business information may be accessed for fraudulent or illegal purposes (eg, identity theft).
Criminals have been attacking computers with affected versions of this software.

What we recommend you do

The problem can be easily fixed by downloading and installing the updates recommended by Adobe.

Adobe recommends Adobe Reader 8 users update to Adobe Reader 8.1.2 Security Update 1, available at the links below:
For Windows: http://www.adobe.com/support/downloads/detail.jsp?ftpID=3967

For Macintosh: http://www.adobe.com/support/downloads/detail.jsp?ftpID=3966

Adobe recommends Acrobat 8 users on Windows update to Acrobat 8.1.2 Security Update 1, available here:
http://www.adobe.com/support/downloads/detail.jsp?ftpID=3976

Adobe recommends Acrobat 8 users on Macintosh update to Acrobat 8.1.2 Security Update 1, available here:
http://www.adobe.com/support/downloads/detail.jsp?ftpID=3977

Adobe recommends Acrobat 3D Version 8 users on Windows update to Acrobat 3D Version 8.1.2 Security Update 1, available here:
http://www.adobe.com/support/downloads/detail.jsp?ftpID=3975

Users with Adobe Reader 7.0 through 7.0.9 should upgrade to Adobe Reader 7.1.0:
For Windows: http://www.adobe.com/support/downloads/detail.jsp?ftpID=3952

For Macintosh: http://www.adobe.com/support/downloads/detail.jsp?ftpID=3953

Adobe recommends Acrobat 7 users on Windows update to Acrobat 7.1.0, available here:
http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows

Adobe recommends Acrobat 7 users on Macintosh update to Acrobat 7.1.0, available here:
http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh

This should be done as soon as possible to reduce the risk to your computer and information.

Where you can find more information

This advice is based on the security bulletin released by Adobe.

http://www.adobe.com/support/security/bulletins/apsb08-15.html

Disclaimer

This Alert has been prepared by AusCERT for the Department of Broadband, Communications and the Digital Economy.

The information is intended for used by home users and small to medium sized businesses and is general information only and not intended as advice and was accurate and up to date at the time of publishing. The material and information in this Alert is not adapted to any particular person's circumstances and therefore cannot be relied upon to be of assistance in any particular case. In any important matter, you should seek professional advice relevant to your own circumstances.

The Commonwealth, AusCERT, and all other persons associated with this Alert accept no responsibility or liability for information either included or referred to in the Alert. No responsibility or liability is accepted for any damage, loss or expense incurred as a result of the information contained in the Alert, whether by way of negligence or otherwise.

The listing of a person or organisation in any part of this site or Alert does not imply any form of endorsement by the Commonwealth of the products or services provided by that person or organisation. Similarly, links to other web sites have been inserted for your convenience and do not constitute endorsement of material at those sites, or any associated organisation, product or service.

Please note that material in this Alert, as the case may be, includes views or recommendations of third parties, which do not necessarily reflect the views of the Commonwealth, or indicate its commitment to particular course of action. Material on this site or in this Alert may also include information provided by third parties. The Commonwealth cannot verify the accuracy of information that has been provided by third parties.